Cant renew certbot

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: hrm.adventa.com.au

I ran this command: certbot renew

It produced this output: Traceback (most recent call last): File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 65, in _reconstitute renewal_candidate = storage.RenewableCert(full_path, config) File "/usr/lib/python3/dist-packages/certbot/storage.py", line 465, in init self._check_symlinks() File "/usr/lib/python3/dist-packages/certbot/storage.py", line 522, in _check_symlinks raise errors.CertStorageError( certbot.errors.CertStorageError: expected /etc/letsencrypt/lived/openproject.adventa.com.au/cert.pem to be a symlink Renewal configuration file /etc/letsencrypt/renewal/openproject.adventa.com.au.conf is broken. Skipping.

My web server is (include version): apache2

The operating system my web server runs on is (include version): ubuntu 20.4

My hosting provider, if applicable, is: digital ocean

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

1 Like
2

Hi @muditha, welcome to the LE community forum :slight_smile:

Please show the output of:
certbot --version

1 Like
3

I find that path to be non-standard.

Let's also see the file:

1 Like
4

2021-09-26_1-04-32

1 Like
5

@rg305 means the contents of the file.

Although this doesn't look like an Apache thing @rg305, the error comes from within certbot itself: someone messed up the renewal configuration file, probably by manually editing things and making an error.

@muditha Please show the contents of the file:

/etc/letsencrypt/renewal/openproject.adventa.com.au.conf

and also the output of:

ls -l /etc/letsencrypt/lived/openproject.adventa.com.au

and, just to be sure

ls -l /etc/letsencrypt/live/openproject.adventa.com.au

2 Likes
6

2021-09-27_10-00-12

7

2021-09-27_10-20-25

8

For some reason your renewal configuration file uses the directory /lived/ instead of /live/? How did that happen? If you change it back to /live/, certbot is probably going to be fine again.

2 Likes
9

how to change it?

1 Like
10

The same way how /live/ was changed to /lived/ in the first place? Probably due to manual tampering, so probably manual intervention is required again.

1 Like
11

thanks for the help guys. It's working now. I have deleted the SSL conf file and archive and reinstall

2 Likes
12

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.